7reelz Privacy Policy

This Privacy Policy ("Policy") describes how 7reelz ("we", "us", "our", "the Company"), operator of the online gaming platform at 7reelz.cam, collects, uses, stores, shares, and protects your personal data. It applies to all users of the 7reelz platform, including registered players, visitors, and prospective users ("you", "your", "data subject"). This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations as administered by the National Privacy Commission of the Philippines.

Introduction & Scope

1.1 This Policy applies to all personal data collected by 7reelz through: (a) the 7reelz website at 7reelz.cam; (b) any mobile web interface, progressive web application, or other digital interface operated by 7reelz; (c) communications between you and 7reelz via email, live chat, or any other channel; and (d) any other means by which you provide information to 7reelz in connection with your use of the platform.

1.2 This Policy does not apply to the privacy practices of third-party services linked from or integrated with the 7reelz platform, including but not limited to GCash, PayMaya, BPI, BDO, and Metrobank. Those services are governed by their own privacy policies, and 7reelz accepts no responsibility for their data handling practices.

1.3 By registering an account with 7reelz, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. Consent to this Policy is a prerequisite for account registration and platform use.

1.4 This Policy must be read in conjunction with the 7reelz Terms & Conditions, available at 7reelz.cam/terms-conditions. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, 7reelz is the personal information controller in respect of personal data collected and processed through the 7reelz platform. As the personal information controller, 7reelz determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted in accordance with applicable Philippine law.

2.2 7reelz operates under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR). Our regulatory status means we are subject to data disclosure obligations to PAGCOR and, where required, to other Philippine government agencies including the Anti-Money Laundering Council (AMLC) and the National Privacy Commission (NPC). These disclosures are governed by law and not by our discretion.

2.3 7reelz has appointed a Data Protection Officer (DPO) as required by the Data Privacy Act. The DPO's contact information is provided in Section 15 of this Policy.

Data We Collect

3.1 7reelz collects personal data in three primary ways: (a) data you provide directly; (b) data collected automatically through your use of the platform; and (c) data received from third parties in connection with KYC verification and payment processing.

Data You Provide Directly

Data Collected Automatically

When you access and use the 7reelz platform, certain technical data is collected automatically. This includes: IP address; device type, model, and operating system; browser type and version; session duration and pages visited; game play logs including bets placed, outcomes, and session timestamps; and geolocation data sufficient to confirm Philippine jurisdiction (country level). This data is collected for security, fraud prevention, regulatory compliance, and platform optimisation purposes.

Data Received from Third Parties

In the course of KYC verification, 7reelz may receive data from identity verification service providers and Philippine government database cross-references. Payment processors including GCash and PayMaya confirm transaction status to 7reelz. 7reelz does not receive your full financial account credentials from any third-party provider.

How We Use Your Data

4.1 7reelz uses your personal data for the following purposes:

• Account creation and management: Registering your account, verifying your identity, maintaining your player profile, and managing account security including two-factor authentication.
• Platform operations: Processing game play, recording bets and outcomes, maintaining session state, and delivering the core gaming experience.
• Payment processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank; verifying payment account ownership; applying transaction limits.
• KYC and identity verification: Verifying that you meet the 21+ age requirement mandated by PAGCOR; confirming your legal identity in compliance with AML regulations.
• Legal and regulatory compliance: Fulfilling obligations under PAGCOR's online gaming regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012; reporting suspicious transactions to AMLC where required; responding to lawful regulatory inquiries.
• Responsible gaming: Monitoring gameplay patterns to identify potential signs of problematic gambling behaviour; administering deposit limits, session controls, and self-exclusion; cooperating with PAGCOR's self-exclusion registry.
• Customer support: Responding to inquiries, resolving disputes, processing complaints, and providing technical assistance via live chat and email.
• Security and fraud prevention: Detecting, investigating, and preventing unauthorised account access, fraud, cheating, money laundering, and other prohibited conduct.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to your registered contact details — subject to your marketing preferences and consent.
• Platform improvement: Analysing aggregate usage data to improve platform features, game selection, payment flows, and user experience.

4.2 7reelz does not use automated decision-making or profiling that produces legal or similarly significant effects on data subjects, except for fraud detection and AML screening which are required by law and supervised by trained compliance personnel.

Legal Basis for Processing

5.1 Under the Data Privacy Act of 2012, 7reelz processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and 7reelz, including account management, game play, and payment processing.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — including marketing communications and the collection of certain optional data. You may withdraw consent at any time via account settings or by contacting our DPO.
• Legal obligation: Processing required to comply with applicable Philippine law, including KYC verification obligations, AML reporting duties, PAGCOR regulatory requirements, and tax obligations.
• Legitimate interests: Processing necessary for the legitimate interests of 7reelz or third parties, where those interests are not overridden by your rights and interests — including fraud detection, platform security, responsible gaming monitoring, and aggregate analytics.

5.2 Where 7reelz relies on consent as the legal basis for processing, you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing or processing conducted on another legal basis.

Data Sharing & Disclosure

6.1 7reelz does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared only in the following circumstances:

• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission (NPC), and any other Philippine government agency with lawful authority to request disclosure.
• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and any other payment processor used to facilitate deposits and withdrawals. Data shared is strictly limited to what is necessary to process the relevant transaction.
• Identity verification providers: Third-party KYC service providers engaged to verify player identity and age. These providers are bound by data processing agreements and may not use your data for any other purpose.
• Game content providers: Online casino game providers who supply games to the 7reelz platform may receive anonymised session data necessary to operate their game software. Personal identity data is not shared with game providers.
• IT and infrastructure providers: Cloud hosting, server management, and cybersecurity service providers engaged by 7reelz, all bound by appropriate data processing agreements.
• Legal proceedings: In response to a valid court order, subpoena, or other lawful legal process issued by a Philippine court or competent authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 7reelz's assets, personal data may be transferred to the acquiring entity, subject to the same protections described in this Policy.

6.2 All third parties with whom 7reelz shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are contractually prohibited from using the data for any purpose beyond what is necessary to perform their services for 7reelz.

Payment Data & GCash Integration

7.1 7reelz integrates directly with GCash and PayMaya as primary payment methods for Filipino players. The following data practices apply to payment processing:

7.2 What 7reelz receives from GCash/PayMaya: Transaction confirmation status, transaction reference numbers, the mobile number registered to your GCash/PayMaya account (for account matching), and transaction amount. 7reelz does not receive your GCash PIN, PayMaya password, full bank account numbers, or any credentials that would grant 7reelz access to your e-wallet.

7.3 What GCash/PayMaya receives from 7reelz: Transaction amount, transaction reference number, and the minimum data necessary to process and settle the payment. The specifics of your gaming activity are not shared with GCash or PayMaya.

7.4 Bank transfers (BPI, BDO, Metrobank): For bank transfer deposits and withdrawals, 7reelz receives confirmation of transfer status and the originating account's last four digits (for reconciliation purposes only). Full bank account numbers are not stored by 7reelz.

Cookies & Tracking Technologies

8.1 The 7reelz platform uses cookies and similar tracking technologies to deliver and improve platform functionality. The following categories of cookies are used:

• Strictly necessary cookies: Essential for platform operation, including session authentication, security tokens, and load balancing. These cannot be disabled without disrupting core functionality.
• Functional cookies: Remember your preferences, such as language settings, account settings, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised aggregate data about how users interact with the platform — pages visited, features used, session duration — to improve platform design and performance.
• Security cookies: Used for fraud detection and abuse prevention, including device fingerprinting to identify suspicious login patterns and bot activity.

8.2 7reelz does not use third-party advertising or behavioural targeting cookies. No tracking data from 7reelz is shared with ad networks or social media platforms.

8.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to use the 7reelz platform. Disabling functional or analytics cookies will not affect core gaming functionality.

8.4 Most mobile browsers used by Filipino players — including Chrome for Android and Safari for iOS — allow cookie management through their settings menus. Clearing cookies will log you out of your current 7reelz session and may reset certain preferences.

Data Retention

9.1 7reelz retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable law, or as necessary to protect the legitimate interests of 7reelz. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account's active status, and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• KYC documentation: Retained for a minimum of five (5) years following the end of the business relationship, as required by AMLA implementing rules.
• Customer support records: Retained for three (3) years from the date of the interaction, or longer if related to an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for the duration of your account plus two (2) years, to demonstrate consent compliance.
• Technical and log data: Retained for twelve (12) months, unless retained longer for a specific security or fraud investigation.

9.2 At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines. Anonymised aggregate data may be retained indefinitely for statistical and business intelligence purposes.

9.3 Where you request deletion of your personal data under Section 11 of this Policy, 7reelz will honour that request to the extent not overridden by a legal retention obligation. Data subject to a mandatory retention period will be flagged as "deletion pending" and deleted at the earliest lawful opportunity.

Data Security

10.1 7reelz implements a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest — including account credentials and payment references — is encrypted using AES-256.
• Access controls: Access to personal data is restricted to authorised personnel on a documented need-to-know basis. All access is subject to multi-factor authentication and comprehensive audit logging.
• Password security: Player passwords are stored exclusively as salted cryptographic hashes. 7reelz staff cannot view or retrieve your password in plain text.
• Infrastructure security: The 7reelz platform is hosted on security-hardened infrastructure with regular penetration testing, vulnerability scanning, and third-party security audits.
• Incident response: 7reelz maintains a documented data breach incident response plan, including notification procedures that comply with the 72-hour NPC reporting requirement.
• Employee training: All staff with access to personal data receive mandatory data privacy and information security training as part of onboarding and on an annual basis thereafter.

10.2 Notwithstanding 7reelz's security measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. You acknowledge this inherent limitation and agree to take reasonable precautions to protect your account credentials.

Your Rights as a Data Subject

11.1 Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights in respect of your personal data held by 7reelz:

11.2 To exercise any of these rights, contact the 7reelz Data Protection Officer using the details in Section 15. 7reelz will respond to all data subject requests within fifteen (15) business days, as required by NPC guidelines. We may request verification of your identity before processing a request to prevent unauthorised access to your data.

Children's Privacy

12.1 The 7reelz platform is an online gambling service and is strictly prohibited for use by individuals under the age of 21 years, as required by PAGCOR regulations and Philippine gaming law. 7reelz does not knowingly collect personal data from any person under the age of 21.

12.2 If 7reelz discovers that personal data has been collected from an individual who is under 21 years of age, it will immediately: (a) suspend the associated account; (b) delete the personal data collected in accordance with applicable law; (c) reverse any deposits and withhold any associated balances in accordance with PAGCOR guidelines; and (d) notify PAGCOR as required by regulation.

12.3 If you are a parent or guardian and believe that your child or a minor has registered on the 7reelz platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without undue delay.

Cross-Border Data Transfers

13.1 Where personal data is transferred outside the Republic of the Philippines — for example, to cloud infrastructure providers or game content providers operating servers in other jurisdictions — such transfers are conducted in compliance with Section 21 of the Data Privacy Act of 2012 and the NPC's implementing rules on cross-border data transfers.

13.2 7reelz ensures that any transfer of personal data to a foreign jurisdiction is subject to: (a) a determination that the receiving jurisdiction affords a level of data protection substantially equivalent to that provided under Philippine law; or (b) appropriate contractual safeguards, including standard contractual clauses approved by the NPC, binding the recipient to data protection standards equivalent to those required under the Data Privacy Act.

13.3 The primary data centres used by 7reelz are located within the Asia-Pacific region. Where data is transferred to processors outside this region, 7reelz maintains documentation of the transfer mechanism and the protection standards applied, which is available to the NPC on request.

Changes to This Policy

14.1 7reelz reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or our business operations.

14.2 Where changes are material — meaning they affect your rights, the categories of data we collect, or the purposes for which data is used — 7reelz will provide at least fourteen (14) days' prior notice via email to your registered address and/or a prominent notice on the platform before the updated Policy takes effect.

14.3 For non-material changes (such as clarifications, corrections of typographical errors, or structural reorganisation that does not alter substance), 7reelz may update the Policy without prior individual notice, updating the "Last Updated" date at the top of this document accordingly.

14.4 The current version of this Policy is always accessible at 7reelz.cam/privacy-policy. Your continued use of the platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with any update, you may close your account as described in the Terms & Conditions.

Contact & Data Protection Officer

15.1 7reelz has appointed a Data Protection Officer (DPO) in accordance with Section 21(d) of the Data Privacy Act. The DPO is responsible for overseeing 7reelz's data protection strategy, monitoring compliance with the Data Privacy Act and this Policy, and serving as the primary point of contact for data subjects and the NPC.

15.2 To exercise your data subject rights, report a privacy concern, or submit a formal complaint, you may contact the 7reelz DPO through the following channels:

• Email: [email protected] (Subject line: "Data Privacy — [Your Request Type]")
• Live Chat: Available directly on the 7reelz platform, 24 hours a day, 7 days a week
• Response Time: All data subject requests will be acknowledged within 3 business days and resolved within 15 business days

15.3 If you are not satisfied with 7reelz's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information about the NPC complaint process is available through the NPC's official channels.